Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36a14b55-f4c6-3683-8deb-47b94de46c98.roa
File:                     36a14b55-f4c6-3683-8deb-47b94de46c98.roa (raw, json)
Hash identifier:          05NqbZb5Ui00Lz2UHYZSlVKoomOscAwmy8cdlQR5fio=
Subject key identifier:   6C:6D:52:C6:CF:BA:92:BA:08:EC:04:A7:87:7A:05:9A:FD:78:6A:68
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847DF2F5E2BB4B59A6403225C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36a14b55-f4c6-3683-8deb-47b94de46c98.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     16625
IP address blocks:        23.216.136.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:5e:2b:b4:b5:9a:64:03:22:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=80bd7187-636c-4c25-8a2f-37a843c7498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:e7:cd:d5:2f:24:ee:8b:bd:43:9d:5f:a8:
                    93:73:e1:7a:e0:33:ff:31:9c:57:2a:28:fc:cf:44:
                    23:b0:49:ff:e9:9c:93:26:9c:7f:40:65:b6:40:7c:
                    24:ab:40:59:d1:16:9a:eb:da:34:76:6b:f9:09:27:
                    22:3e:a4:2c:02:48:af:8a:77:c4:5a:fe:49:d8:b1:
                    e8:1e:4a:95:05:3f:2f:c3:6b:1c:91:4a:f8:a5:d2:
                    0b:0a:4a:f8:98:20:e5:7a:56:66:af:25:fd:09:1e:
                    8f:56:a4:50:81:d4:8e:b6:f5:3a:cc:eb:09:7a:1d:
                    12:00:25:31:7a:84:0d:55:ae:45:5a:39:c2:23:5a:
                    eb:45:da:c3:38:b1:77:73:b8:a6:08:b6:f0:ea:7e:
                    0a:1a:7f:9f:13:b3:4a:31:4a:c9:72:bf:c8:d7:80:
                    16:c5:4f:36:8c:3f:52:dd:d2:76:9c:f3:37:77:5b:
                    55:94:a8:97:32:83:58:11:ed:a8:9a:aa:c7:4b:6d:
                    10:3d:30:0d:2c:02:65:57:90:82:fb:77:c0:8f:9b:
                    a4:13:42:fb:36:64:9c:50:ed:17:2b:fe:91:a4:00:
                    01:34:3e:13:2c:5a:3b:ab:c4:fa:2f:7e:3b:13:d8:
                    18:cc:40:e6:d8:d0:0f:b1:f6:ec:f5:a1:c8:4e:78:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:52:C6:CF:BA:92:BA:08:EC:04:A7:87:7A:05:9A:FD:78:6A:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36a14b55-f4c6-3683-8deb-47b94de46c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:59:13:d8:4d:dc:af:99:75:ba:07:c6:fd:71:4f:1d:2b:c5:
         2b:5d:6b:d1:0d:1c:7b:61:48:b9:47:2f:8b:39:f3:f5:48:95:
         4b:88:15:e8:cb:f4:fd:eb:6b:3e:dc:37:79:85:e6:1c:f5:91:
         d1:7a:41:4f:b7:4a:f7:30:e8:09:c8:ef:f5:fb:4c:6c:db:ce:
         a9:c8:46:ec:01:7f:ca:5c:76:fe:31:5c:24:ff:7b:75:48:18:
         63:94:86:b9:7b:1e:47:e8:9d:90:c6:15:92:af:b1:6c:79:2c:
         ea:9b:ea:80:dd:ad:0d:2e:5b:7a:12:a5:e2:0b:ae:ad:51:ee:
         2d:4a:22:77:76:af:30:85:6d:e3:ba:13:9b:b4:f4:8e:05:68:
         82:e0:64:43:b0:4e:eb:29:fa:ae:59:42:c0:f9:c9:67:70:7d:
         a0:91:ec:41:5d:ed:32:17:1a:74:b2:98:23:44:c8:cb:87:a1:
         b0:ed:c2:da:ed:e5:77:d8:4f:a8:f6:d7:56:a2:86:eb:2c:a8:
         48:0b:34:26:3c:13:2b:2b:af:99:24:6a:5f:e5:12:53:41:ea:
         7f:10:11:6a:77:7b:c6:2e:c3:99:40:dd:d9:bc:d7:17:25:89:
         47:52:17:80:90:1e:c9:2e:39:13:ae:f3:df:c8:61:87:5b:61:
         55:5c:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:46:44 2024 by rpki-client on console-ams.rpki-client.org